This vulnerability in HCLSoftware Commerce involves incorrect privilege assignment, enabling privilege escalation. Exploitation could lead to denial of service, exposure of personal user data, and unauthorized administrative operations. The CVSS 3.1 base score is 8.8, indicating high impact with network attack vector, low attack complexity, and no user interaction required. The vulnerability affects confidentiality, integrity, and availability. No patch or official remediation level has been published at this time, and no known exploits are reported in the wild.

Successful exploitation can result in denial of service, unauthorized disclosure of personal user data, and execution of administrative operations without proper authorization. This impacts the confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected system to trusted users only and monitor for suspicious activity related to privilege escalation attempts.